JP2011034223A - Information providing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information providing system for achieving compatibility between the relaxation and protection of the complicatedness of the input of personal information, and for collateralizing the soundness of transaction between a user and an undertaker. <P>SOLUTION: In an information providing system 1, when a request for use is transmitted from a portable terminal 30 of a user, a type of personal information which can be acquired by an alliance undertaker is transmitted to a cooperative undertaker server 40 based on available information stored in an alliance undertaker management server 20. And, since available personal information is set for every alliance undertaker, the personal information of the user is suppressed from being transferred than necessary. Furthermore, the undertaker as the transmission destination of the personal information is the alliance undertaker of the communication undertaker of the portable terminal 30, and personal information acquired by the alliance undertaker is turned to be personal information owned by the communication undertaker. Therefore, it is possible to secure both the reliability of the undertaker when it is viewed from the user side and the reliability of the user when it is viewed from the undertaker side through the reliability of the communication undertaker. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information providing system that handles personal information.

  2. Description of the Related Art In recent years, there are technologies that provide various services such as opening a bank account and purchasing products and the like on a merchandise sales site on an Internet site. However, when receiving these services, the user is required to pre-register personal information such as name, address, and telephone number.

  Therefore, as a technique for reducing the complexity of inputting personal information, for example, there is a personal information display method described in Patent Document 1. In this method, the personal information of the user is registered in advance in the personal simple input authentication server, and the personal information transmitted from the personal simple input authentication server is displayed on the input screen of the Internet site of the affiliated business partner with the operator of the server. Information is automatically displayed.

JP 2002-183617 A

  However, the conventional personal information display method described above merely displays personal information pre-registered in the personal simple input authentication server on the input screen. Therefore, it is difficult for the user to systematically understand the reliability of the affiliated company that is the registration destination of personal information, and similarly, the affiliated company side systematically grasps the reliability of the user who uses the service. This is also difficult, and ensuring the soundness of commercial transactions is an issue. On the other hand, in the information providing system that handles the personal information as described above, the protection of the personal information is a very important issue. Therefore, it is necessary to take measures to prevent unnecessary exchange of personal information within the system.

  The present invention has been made to solve the above-mentioned problems, and is capable of achieving both relaxation and protection of the complexity of inputting personal information and ensuring the soundness of transactions between the user and the business operator. An object is to provide a providing system.

  In order to solve the above-mentioned problems, an information providing system according to the present invention is managed by a telecommunications carrier that performs communication service of a mobile terminal, and stores a personal information management server that stores various personal information for each user of the mobile terminal, A partner operator management server that stores, among personal information stored in the information management server, for each partner operator server managed by a partner operator that is affiliated with a carrier, The personal information management server includes an acquisition unit that acquires the acquirable information stored in the partner operator management server, and a type of individual that can be acquired by the partner operator based on the acquirable information acquired by the acquisition unit. It has the transmission means which transmits information to a partner company server, It is characterized by the above-mentioned.

  In this information providing system, based on the acquirable information stored in the partner operator management server, personal information of a type that can be acquired by the partner operator is transmitted to the partner operator server. As a result, the user can perform authentication to the operator site without inputting personal information each time. Moreover, in this information provision system, since personal information that can be acquired for each partner company is set, it is possible to suppress unnecessary exchange of user personal information. Furthermore, since the business operator that is the destination of the personal information is a tie-up operator of the mobile phone carrier owned by the user, and the personal information acquired by the tie-up carrier is personal information owned by the telecommunications carrier, Both the reliability of the operator seen from the user side and the reliability of the user seen from the operator side are ensured through the reliability of the communication carrier. Thereby, the soundness of the transaction between a user and a provider can be secured.

  The personal information management server further includes receiving means for receiving, from the user's mobile terminal, user consent information indicating which information the user agrees to transmit, and the transmitting means is a partner operator Among the types of personal information that can be acquired, it is preferable to send only information that matches the user consent information to the partner company server. In this case, since the content of the personal information automatically transmitted to the partner company server can be limited by the user's intention, the protection of the personal information can be further strengthened.

  ADVANTAGE OF THE INVENTION According to this invention, while being able to reconcile and protect the complexity of input of personal information, the soundness of the transaction between a user and a provider can be ensured.

1 is a schematic diagram showing an embodiment of an information providing system according to the present invention. It is a figure which shows an example of the screen transition of the portable terminal 30 at the time of utilizing registration agency. It is a block diagram which shows the functional component of an affiliated company management server. It is a figure which shows an example of BP information stored in a BP information management database. It is a block diagram which shows the functional component of a personal information management server. It is a figure which shows an example of the user consent information stored in a user consent information management database. It is a figure which shows an example of the accounting information stored in an accounting information database. It is a flowchart which shows the operation | movement at the time of BP registration to a registration agency platform. It is a flowchart which shows the operation | movement in the case of user registration to a registration agency platform. It is a flowchart which shows the operation | movement in the case of registration agency.

  Hereinafter, a preferred embodiment of an information providing system according to the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a schematic diagram showing an embodiment of an information providing system according to the present invention. As shown in FIG. 1, the information providing system 1 is a system for constructing a registration agency platform 2 including a personal information management server 10 and a partner operator management server 20. The registration agency platform 2 is managed by a telecommunications carrier that manages a communication service of the mobile terminal 30 owned by the user, and is associated with the partner operator server 40 that is managed by the mobile terminal 30 and the tie-up operator that is affiliated with the communication carrier. Are connected to each other via a network so as to be able to communicate with each other.

  In the registration agency platform 2, when the user of the mobile terminal 30 tries to use various services provided by the partner company, the personal information of the user owned by the communication company is transmitted to the partner company server 40. The user can authenticate the operator site by omitting the input of personal information every time. In addition, a predetermined charge is generated for the affiliated business operator according to the number of registered users, the number of times personal information is transmitted, and the like.

  FIG. 2 is a diagram illustrating an example of screen transition of the mobile terminal 30 when the user uses the registration proxy via the registration proxy platform 2. As shown in FIG. 2A, in the “AA bank member-only service site”, which is one of the Internet sites by partner companies, menus such as “service overview”, “login”, and “member registration” are displayed. Yes.

  When the user selects “member registration”, an agreement screen is displayed as shown in FIG. On the consent screen, for example, buttons such as “I agree” and “I do not agree” are displayed at the bottom of the screen along with a message such as “I agree to provide personal information provided to the carrier to XX bank.” The

  When the user agrees to provide personal information on the consent screen, a network authentication screen is displayed as shown in FIG. On the network authentication screen, a window for entering the network authentication number is displayed together with a message such as “Please enter the network authentication number”. When the user inputs a valid network authentication number on this network authentication screen, as shown in FIG. 2D, authentication is performed without the user actually inputting personal information, and a registration completion screen is displayed. The

  Next, the personal information management server 10 and the partner operator management server 20 that constitute the registration agency platform 2 described above will be described in detail.

  First, the partner company management server 20 will be described. The affiliated company management server 20 is physically a computer system including a CPU, a memory, a communication interface, a storage unit such as a hard disk, a display unit such as a display, and the like. The partner company management server 20 stores, for each partner company, acquirable information indicating information that can be acquired from the personal information stored in the personal information management server 10.

  As shown in FIG. 3, the affiliated company management server 20 includes, as functional components, a BP registration request receiving unit 201, a CPID issuing unit 202, a BP information management database 203, an authentication request receiving unit 204, It has a BP authentication unit 205 and an authentication result information transmission unit 206.

  The BP registration request receiving unit 201 is a part that receives BP (business partner) registration request information for a communication carrier from a server on the carrier side (which becomes the partner carrier server 40 after registration). The registration request information includes, for example, information indicating the desired obtainable information, the connection source IP address, and the billing plan. The BP registration request receiving unit 201 outputs the received BP registration request information to the CPID issuing unit 202.

  The CPID issuing unit 202 is a part that receives a BP registration request information and issues a CP (content provider) ID. The CPID issuing unit 202 generates BP information in which the issued CPID is associated with the connection source IP address and the obtainable information, and stores the BP information in the BP information management database 203. In addition, the CPID issuing unit 202 transmits the issued CPID to the partner company server 40.

  FIG. 4 is a diagram illustrating an example of BP information stored in the BP information management database 203. In the example shown in FIG. 4, the CPID (“1111”, “2222”, “3333”), the connection source IP address (“1.1.1.1”, “2.2.2.2”, “3. 3.3.3 "), and acquirable information. Here, as the personal information to be handled, “age information” indicating the age of the user, “storage information” indicating the payment status of the usage fee of the mobile terminal, “account information” indicating the bank account number of the user, an address, and the like are shown. “Destination information” is set.

  In the example of FIG. 4, all personal information of the BPs having CPIDs “1111” and “2222” are “acquisable”. On the other hand, in the BP having the CPID “3333”, only the age information and the destination information are “acquisable”, and the storage information and the account information are “not acquirable”.

  The authentication request receiving unit 204 is a part that receives authentication request information from the partner business server 40 that has already been registered for BP. The authentication request information includes, for example, the user ID of the mobile terminal, the CPID, and the connection source IP address. The authentication request reception unit 204 outputs the received authentication request information to the BP authentication unit 205.

  The BP authentication unit 205 is a part that performs authentication (BP authentication) of a partner company that is the transmission source of the authentication request information. More specifically, the BP authentication unit 205 refers to the BP information stored in the BP information management database 203 based on the authentication request information received from the authentication request reception unit 204, and the CPID included in the authentication request information. Authentication result information is generated based on whether or not BP information matching the connection source IP address is stored in the BP information management database 203. The BP authenticating unit 205 outputs the generated authentication result information to the authentication result information transmitting unit 206 together with the user ID and the acquirable information of the authenticated BP.

  The authentication result information transmission unit 206 is a part that transmits authentication result information. The authentication result information transmission unit 206 transmits the authentication result information, user ID, and acquirable information received from the BP authentication unit 205 to the personal information management server 10.

  Next, the personal information management server 10 will be described. The personal information management server 10 is physically a computer system including a storage unit such as a CPU, a memory, a communication interface, and a hard disk, a display unit such as a display, and the like, like the partner company management server 20. The personal information management server 10 is a server that is managed by a telecommunications carrier that operates the communication service of the mobile terminal 30 and stores various personal information for each user of the mobile terminal 30.

  As shown in FIG. 5, the personal information management server 10 includes, as functional components, an authentication result information receiving unit 101, a user authentication unit 102, an NW authentication unit 103, an information matching unit 104, and user consent information. A request unit 105, a user consent information management database 106, a personal information database 107, a personal information transmission unit 108, a billing information generation unit 109, and a billing information database 110 are included.

  The authentication result information receiving unit 101 is a part that receives authentication result information, a user ID, and acquirable information from the partner operator management server 20. The authentication result information receiving unit 101 outputs the authentication result information and the user ID to the user authentication unit 102. Further, the authentication result information receiving unit 101 stores the user ID in the user consent information management database 106 and outputs the acquirable information to the information matching unit 104.

  The user authentication unit 102 is a part that performs user authentication of the mobile terminal 30. Upon receiving the authentication result information from the authentication result information receiving unit 101, the user authentication unit 102 refers to a contractor information database (not shown) of the mobile terminal and performs user authentication. The user authentication unit 102 generates authentication result information indicating the authentication result, and outputs it to the NW authentication unit 103.

  The NW authentication unit 103 is a part that performs NW authentication of the mobile terminal 30. When the NW authentication unit 103 receives the authentication result information from the user authentication unit 102, the NW authentication unit 103 transmits request information for requesting transmission of the NW personal identification number to the portable terminal 30. The NW authentication unit 103 receives the NW personal identification number transmitted from the portable terminal 30 in response to the transmission of the request information, and performs NW authentication of the portable terminal 30 based on the number. When the NW authentication is completed, the NW authentication unit 103 outputs instruction information for instructing the information collating unit 104 to start collation together with the user ID.

  The information collating unit 104 is a part that collates the acquirable information received from the authentication result information receiving unit 101 and the user agreement information stored in the user agreement information management database 106. Here, FIG. 6 is a diagram illustrating an example of the user agreement information stored in the user agreement information management database 106. In the example shown in FIG. 6, a user ID and user consent information are stored in association with each other.

  In the user consent information, four items of age information, storage information, account information, and destination information are set corresponding to the acquirable information. In this example, the user having the user ID “AAA” has agreed to transmit personal information regarding age information and account information to the partner company having the CPID “1111”, and the partner business having the CPID “2222”. Agrees to all types of personal information. Further, the user having the user IDs “BBB” and “CCC” has agreed to transmit personal information regarding the account information and the destination information to the partner company having the CPID “3333”.

  Upon receiving the instruction information and the user ID from the NW authentication unit 103, the information matching unit 104 refers to the user consent information management database 106 based on the user ID. Then, the information collating unit 104 collates the acquirable information received from the authentication result information receiving unit 101 with the user consent information, and information that matches the user consent information among the types of personal information that can be acquired by the partner company. Are acquired from the personal information database 107 and transmitted to the personal information transmitting unit 108.

  Further, when the user agreement information does not exist in the user agreement information management database 106, the information matching unit 104 determines that the user is a newly registered user, and requests the user agreement information request unit 105 to make a request. Outputs instruction information for instructing transmission. Then, the information matching unit 104 refers to the user consent information output from the user consent information requesting unit 105 to the user consent information management database in response to the transmission of the instruction information, and executes the above information matching.

  The personal information transmitting unit 108 is a part that transmits the personal information received from the information collating unit 104 to the partner company server 40. After transmitting the personal information, the personal information transmitting unit 108 outputs completion information indicating that the transmission is completed to the billing information generating unit 109. The billing information generation unit 109 is a part that generates billing information for a partner company that uses the registration agency platform 2 based on the billing plan set at the time of BP registration. The charging information generation unit 109 stores the generated charging information in the charging information database 110.

  FIG. 7 is a diagram illustrating an example of billing information stored in the billing information database 110. In the example shown in FIG. 7, CPID, BP registration year, billing plan, number of user registrations, and number of acquisition times of each personal information are associated as the billing information. The billing amount is determined in accordance with the billing plan rate based on the usage period, the number of user registrations, the number of acquisitions of each piece of personal information, and the like.

  Next, the operation of the information providing system 1 described above will be described.

  FIG. 8 is a flowchart showing an operation at the time of BP registration to the registration agency platform 2. As shown in the figure, when the BP registration request is started in the partner company server 40 (step S01), the desired obtainable information, the connection source IP address, and the billing plan are obtained from the partner company server 40. Is transmitted to the person management server 20 (step S02).

  The partner company management server 20 that has received each information issues a CPID (step S03), and stores the BP information in the BP information management database 203 (step S04). Then, the CPID is transmitted from the partner company management server 20 to the partner company server 40 (step S05), and the partner company server 40 stores the received CPID (step S06). Thus, the BP registration in the registration agency platform 2 is completed.

  FIG. 9 is a flowchart showing an operation at the time of user registration to the registration agency platform 2. As shown in the figure, when a user registration request is started in the mobile terminal 30 of the user who has accessed the partner company's site (step S11), the user ID is transmitted from the portable terminal 30 to the partner company server 40. (Step S12).

  Next, the user ID, the CPID, and the connection source IP address are transmitted from the partner operator server 40 to the partner operator management server 20 (step S13), and BP authentication is performed in the partner operator management server 20 (step S14). ). When the BP authentication is completed, the user ID and the authentication result information are transmitted from the partner operator management server 20 to the personal information management server 10 (step S15).

  Subsequently, request information of the NW personal identification number is transmitted from the personal information management server 10 to the portable terminal 30 (step S16). In the portable terminal 30 that has received the request information, an input screen for the NW personal identification number is displayed (step S17), and the NW personal identification number input by the user is transmitted from the portable terminal 30 to the personal information management server 10 (step S18). .

  In the personal information management server 10 that has received the NW personal identification number, NW authentication of the portable terminal 30 is performed (step S19). When the NW authentication is completed, request information for user consent information is transmitted from the personal information management server 10 to the portable terminal 30 (step S20). In the mobile terminal 30 that has received the request information, an input screen for user consent information is displayed (step S21), and the user consent information input by the user is transmitted from the mobile terminal 30 to the personal information management server 10 (step S22). .

  Next, the personal information management server 10 stores user consent information (step S23), and registration completion information is transmitted from the personal information management server 10 to the portable terminal 30 (step S24). In the portable terminal 30, a registration completion screen is displayed (step S25), and user registration to the registration agency platform 2 is completed. At this time, the personal information management server 10 generates billing information due to the increase in the number of user registrations (step S26).

  FIG. 10 is a flowchart showing the operation during registration agency. As shown in the figure, when a registration proxy use request is started in the mobile terminal 30 of the user who has accessed the partner company's site (step S31), the user ID is transmitted from the portable terminal 30 to the partner company server 40. (Step S32)

  Next, the user ID, the CPID, and the connection source IP address are transmitted from the partner operator server 40 to the partner operator management server 20 (step S33), and BP authentication is performed in the partner operator management server 20 (step S34). ). When the BP authentication is completed, the user ID, the acquirable information, and the authentication result information are transmitted from the partner operator management server 20 to the personal information management server 10 (step S35).

  Subsequently, the personal information management server 10 performs user authentication of the user of the portable terminal 30 (step S36). When the user authentication is completed, the NW personal identification number request information is transmitted from the personal information management server 10 to the portable terminal 30 (step S37). In the mobile terminal 30 that has received the request information, an input screen for the NW personal identification number is displayed (step S38), and the NW personal identification number input by the user is transmitted from the mobile terminal 30 to the personal information management server 10 (step S39). .

  In the personal information management server 10 that has received the NW personal identification number, NW authentication of the portable terminal 30 is performed (step S40). When the NW authentication is completed, the personal information management server 10 collates the acquirable information acquired from the partner operator management server 20 with the user consent information in the user consent information management database 106 (step S41). Among the personal information included in the possible information, the personal information of the type that matches the user consent information is transmitted from the personal information management server 10 to the partner company server 40 (step S42).

  The partner company server 40 performs user registration such as member registration using the received personal information (step S43). After registration, registration completion information is transmitted from the partner company server 40 to the mobile terminal 30 (step S44), and a registration completion screen is displayed on the mobile terminal 30 (step S45). In addition, the personal information management server 10 generates billing information due to the increase in the number of transmissions of personal information (step S46).

  As described above, in the information providing system 1, when a use request is transmitted from the user's mobile terminal 30, the partner provider acquires the information based on the obtainable information stored in the partner provider management server 20. Possible types of personal information are transmitted to the partner company server 40. As a result, the user can perform authentication to the operator site without inputting personal information each time. Further, in the information providing system 1, personal information that can be acquired for each partner company is set at the time of BP registration, so that it is possible to suppress unnecessary exchange of user personal information.

  Furthermore, in the information providing system 1, the business that is the transmission destination of the personal information is a business partner of the telecommunications carrier of the mobile terminal 30 owned by the user, and the personal information acquired by the business partner is the telecommunications carrier. It is personal information owned by. Therefore, both the reliability of the operator as seen from the user side and the reliability of the user as seen from the operator side are ensured through the reliability of the communication carrier. Thereby, the soundness of the transaction between a user and a provider can be secured.

  Also, the personal information management server 10 receives user agreement information indicating which information of the personal information the user agrees to transmit from the portable terminal 30, and among the types of personal information that can be acquired by the partner company Only the information that matches the user consent information is transmitted to the partner company server 40. Thereby, since the content of the personal information automatically transmitted to the partner company server 40 can be limited by the user's intention, the protection of the personal information can be further strengthened.

  DESCRIPTION OF SYMBOLS 1 ... Information provision system, 10 ... Personal information management server, 20 ... Partner company management server, 30 ... Portable terminal, 40 ... Partner company server, 101 ... Authentication result information receiving part, 105 ... User consent information request part, 108 … Personal information transmitter.

Claims (2)

A personal information management server that is managed by a telecommunications carrier that provides communication services for mobile terminals and stores various personal information for each user of the mobile terminal;
Of the personal information stored in the personal information management server, the affiliated business that stores the acquirable information indicating the information that can be obtained for each business partner server managed by the business partner affiliated with the communication carrier With a management server,
The personal information management server is acquirable by the partner operator based on acquisition means for acquiring the acquirable information stored in the partner operator management server and the acquirable information acquired by the acquisition means. An information providing system comprising: a transmitting unit that transmits types of personal information to the partner company server. The personal information management server further includes receiving means for receiving, from the user's portable terminal, user consent information indicating which information of the personal information the user agrees to transmit,
2. The information providing system according to claim 1, wherein the transmitting unit transmits only information that matches user consent information among the types of personal information that can be acquired by the partner company to the partner company server. .

Images